Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - Networking > Linux - Wireless Networking
User Name
Linux - Wireless Networking This forum is for the discussion of wireless networking in Linux.


  Search this Thread
Old 03-31-2005, 07:26 AM   #1
Senior Member
Registered: Sep 2004
Location: Sweden
Distribution: Ubuntu, Debian
Posts: 1,109

Rep: Reputation: 49
Sniffing packages (only get one way)

I am playing around with a wifi lan here. My friend (who is asleep) has a wifi card just as I do and we have a router here that we both connect to. So I started ethereal and started sniffing.

Then I went to his computer and logged in at my own account here at LQ, trying to sniff my own password. Then I saw that the only packages I got was the one sent TO his card, I did not get anything with his ip as the source.

My guess is that there is a big difference between an access point and a card, so my card does not get what he is sending, just what he is getting. Is this right and is there anyway that I can sniff things coming FROM him?
Old 03-31-2005, 10:14 AM   #2
Registered: Aug 2003
Location: Little Rock, Arkansas
Distribution: RH, Fedora, Suse, AIX
Posts: 736

Rep: Reputation: 31
The problem is your wireless card drivers. To my understanding, drivers supplied by wireless vendors dont support "monitor" mode, which is necessary to capture from wireless interfaces besides yours and the AP.

Try Kismet instead. Or you can get an Orinoco wireless card.

For some really excellent discussion about wireless networking, check out
Old 03-31-2005, 10:57 AM   #3
Senior Member
Registered: Jan 2002
Location: Southern California
Distribution: Slackware
Posts: 1,876

Rep: Reputation: 49
Kismet will not allow packet sniffing as described by the original poster.

An ORiNOCO card, in and of itself will not allow monitor mode. A driver patch or release candidate drivers are required for that (and for using Kismet). More detail is available on the Kismet-wireless site.

Ethereal must be run in promiscuous mode to see things in both directions. MezzyMeat, make sure you select that option when running it.
Old 03-31-2005, 02:35 PM   #4
Senior Member
Registered: Sep 2004
Location: Sweden
Distribution: Ubuntu, Debian
Posts: 1,109

Original Poster
Rep: Reputation: 49
Yeah, it worked when I manually put it into monitor mode before sniffing
$ iwconfig ath0 mode monitor


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
wireless sniffing guild Linux - Security 16 08-30-2005 11:29 AM
Sniffing Layer 1 rafita Linux - Wireless Networking 1 04-18-2005 03:08 AM
IP Sniffing, how? shrike_912 Slackware - Installation 1 06-06-2004 05:36 PM
sniffing a switch darthczyz Linux - Software 2 07-23-2003 05:33 PM
sniffing question Di0de Linux - Networking 2 07-02-2003 08:39 PM > Forums > Linux Forums > Linux - Networking > Linux - Wireless Networking

All times are GMT -5. The time now is 07:16 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration